Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File: bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier: D91hfi5tWLPcz6Y46QmzyI8mooYcgFgppHotC3ZASeY=
Subject key identifier: F8:6F:AB:7E:2E:39:B7:79:2A:8B:95:6E:C0:24:FC:36:7C:36:CD:E1
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 01969F3F4F036B4E177E07FAEE4854773B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number: 1523
Signing time: Mon 05 May 2025 07:00:48 +0000
Manifest this update: Mon 05 May 2025 07:00:48 +0000
Manifest next update: Tue 06 May 2025 07:00:48 +0000
Files and hashes: 1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: 2DvGe6Nfmr9GLoOvoq4juQtcDJa97JhxCnK0qePxwdA=)
2: z4IVFfra9dO93PZl7xdhmVhqzoE.roa (hash: 90ivV2dV0BSclFTId5ah7Fo9mKfLvO9taEvtncU7b/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:4f:03:6b:4e:17:7e:07:fa:ee:48:54:77:3b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: May 5 07:00:48 2025 GMT
Not After : May 6 07:00:48 2025 GMT
Subject: CN=f86fab7e2e39b7792a8b956ec024fc367c36cde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:06:5a:5c:25:2c:f1:c2:4e:ec:b8:1e:62:
6a:9c:18:92:af:50:6b:63:51:46:82:52:28:37:6a:
89:c3:8d:f0:ea:5d:05:4d:9e:56:a0:61:95:bc:76:
b4:90:94:40:d7:e8:d1:91:6e:ca:fc:85:b5:8b:7d:
0e:15:01:1d:58:4f:6a:13:64:6f:23:1d:33:38:13:
63:a4:69:39:c0:bf:8c:d7:4d:8e:0b:cc:bb:54:a1:
f6:71:bb:4a:e4:fc:dd:b0:df:71:df:1f:69:d6:47:
48:cd:ac:19:8e:ee:a2:8d:6a:34:4a:65:bb:38:74:
ff:b4:44:2a:2a:6d:cb:6b:7d:ac:b5:3b:b7:3b:e6:
29:5d:d3:d7:f1:75:08:b9:c2:7a:8f:fc:6d:28:67:
53:59:cc:8f:f7:ad:25:96:84:6c:00:27:d7:7d:2a:
08:8d:39:52:17:df:96:42:d0:97:10:dc:b1:8b:5b:
d2:e1:d1:be:7e:15:5d:ad:d5:23:fd:dd:0b:9a:22:
dd:d8:5b:18:97:7c:43:17:ff:c9:1c:e9:aa:6d:4e:
0b:ad:96:91:f6:b0:df:64:23:4b:ef:d6:97:14:ca:
65:fa:f5:c6:8a:05:8a:3d:93:a8:d9:d5:2c:97:8f:
8a:cf:9d:0d:d3:47:04:76:bd:6a:20:00:3e:bf:4a:
54:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6F:AB:7E:2E:39:B7:79:2A:8B:95:6E:C0:24:FC:36:7C:36:CD:E1
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ea:ca:5b:d4:72:66:71:84:a4:8c:52:8b:0e:9d:c0:9a:3a:
94:5f:1f:ff:bf:c1:fa:6d:4f:ff:75:a3:19:9d:4a:f0:76:46:
2f:1a:d4:33:b9:63:79:16:c5:a3:36:44:54:39:28:de:db:0f:
38:c2:af:fe:84:1a:7f:53:7a:bc:06:cb:37:1b:ef:68:66:e3:
fc:cc:0d:98:89:1f:43:cd:18:bb:63:18:72:59:f9:9e:be:af:
ea:66:4f:a8:eb:c8:96:dd:40:49:13:f7:19:bd:c1:78:32:b0:
91:a2:6c:a1:6e:5a:e1:d7:1a:9e:c4:e1:1b:d4:8e:c8:8d:a3:
80:f2:a1:b4:69:4d:51:15:fe:f4:cf:10:8a:4d:89:de:4f:a7:
6b:f4:d8:1d:dc:46:e3:a8:f9:c4:1a:32:48:49:a6:d4:bc:76:
c9:94:fb:f4:ef:80:c7:17:1c:c7:b3:8c:7f:a4:30:b1:49:37:
85:5a:9e:90:af:96:be:73:20:3b:9c:e2:28:7d:54:f4:ec:0e:
dd:7b:e4:38:11:3e:81:03:c7:6b:6e:bd:3f:d8:33:0e:32:0a:
1c:2d:c0:be:64:fe:11:20:d4:80:66:50:98:39:80:79:5b:3e:
db:e9:bd:2a:ae:31:56:36:47:57:f1:e0:01:dd:9b:30:74:8c:
e7:1b:d7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:14:22 2025 by rpki-client